chore(pipeline): enable hermetic builds (#237)

Whatever that means for this kind of image <shrug> Signed-off-by: Lance Ball <[email protected]>
securesign · Aug 21, 2024 · 581b451 · 581b451
1 parent 0a91b87
commit 581b451
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 6 deletions.
diff --git a/.tekton/client-server-pull-request.yaml b/.tekton/client-server-pull-request.yaml
@@ -28,6 +28,10 @@ spec:
     value: 5d
   - name: dockerfile
     value: Dockerfile.clients.rh
+  - name: hermetic
+    value: "true"
+  - name: build-source-image
+    value: "true"
   pipelineSpec:
     finally:
     - name: show-sbom
@@ -199,10 +203,10 @@ spec:
           value: task
         resolver: bundles
       when:
-      - input: $(params.prefetch-input)
-        operator: notin
+      - input: $(params.hermetic)
+        operator: in
         values:
-        - ""
+        - "true"
       workspaces:
       - name: source
         workspace: workspace

diff --git a/.tekton/client-server-push.yaml b/.tekton/client-server-push.yaml
@@ -25,6 +25,10 @@ spec:
     value: quay.io/redhat-user-workloads/rhtas-tenant/cli/client-server:{{revision}}
   - name: dockerfile
     value: Dockerfile.clients.rh
+  - name: hermetic
+    value: "true"
+  - name: build-source-image
+    value: "true"
   pipelineSpec:
     finally:
     - name: show-sbom
@@ -196,10 +200,10 @@ spec:
           value: task
         resolver: bundles
       when:
-      - input: $(params.prefetch-input)
-        operator: notin
+      - input: $(params.hermetic)
+        operator: in
         values:
-        - ""
+        - "true"
       workspaces:
       - name: source
         workspace: workspace